<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>PF: OpenBSD 包过滤器</title>
<link rev="made" href="mailto:www@openbsd.org">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="resource-type" content="document">
<meta name="description"   content="the OpenBSD FAQ page">
<meta name="keywords"      content="openbsd,faq,pf">
<meta name="distribution"  content="global">
</head>

<!--
Copyright (c) 2003, Nick Holland <nick@openbsd.org>
Copyright (c) 2003-2005, Joel Knight <enabled@myrealbox.com>

Permission to use, copy, modify, and distribute this documentation for
any purpose with or without fee is hereby granted, provided that the
above copyright notice and this permission notice appear in all copies.

THE DOCUMENTATION IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL
WARRANTIES WITH REGARD TO THIS DOCUMENTATION INCLUDING ALL IMPLIED
WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE
AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL
DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR
PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
PERFORMANCE OF THIS DOCUMENTATION
-->

<body bgcolor="#ffffff" text="#000000">
<!-- Passes validator.w3.org, please keep it this way;
please, use a max of 72 chars per line -->

<a href="../../../zh/index.html">
<img alt="[OpenBSD]" height=30 width=141
    src="../../../images/smalltitle.gif" border="0">
</a>
<p>
<big><b>语言:</b></big>&nbsp;<b>zh</b>
<a href="../../../zh/translation.html">[团队]</a><br>
<a href="../de/index.html">de</a>
<a href="../index.html">en</a>
<a href="../fr/index.html">fr</a>
<a href="../it/index.html">it</a>
<a href="../nl/index.html">nl</a>
<a href="../pl/index.html">pl</a>
<a href="../pt/index.html">pt</a>
<p>
<a href="../../zh/index.html">[回到 FAQ]</a>
<a href="config.html">[下页: 起步]</a>
<h1><font color="#e00000">PF: OpenBSD 包过滤器</font></h1>
<hr>

<p>
<h3>目录</h3>
<ul>
<li>基本配置
    <ul>
    <li><a href="config.html">起步</a>
    <li><a href="macros.html">列表与宏</a>
    <li><a href="tables.html">表</a>
    <li><a href="../filter.html">包过滤</a>
    <li><a href="../nat.html">网络地址转换(NAT)</a>
    <li><a href="../rdr.html">端口重定向</a>
    <li><a href="../shortcuts.html">创建规则的捷径</a>
    </ul>
<li>高级配置
    <ul>
    <li><a href="../options.html">运行时选项</a>
    <li><a href="scrub.html">擦洗(包的标准化)</a>
    <li><a href="../anchors.html">锚</a>
    <li><a href="../queueing.html">包的队列与优先级</a>
    <li><a href="../pools.html">地址池与负载均衡</a>
    <li><a href="../tagging.html">包标签(过滤策略)</a>
    </ul>
<li>额外话题
    <ul>
    <li><a href="../logging.html">记录</a>
    <li><a href="perf.html">性能</a>
    <li><a href="../ftp.html">FTP 的问题</a>
    <li><a href="authpf.html">Authpf: 认证网关</a>
    <li><a href="../carp.html">使用 CARP 和 pfsync 构建冗余防火墙</a>
    </ul>
<li>规则样例
    <ul>
    <li><a href="../example1.html">家庭或小型办公室的防火墙</a>
    </ul>
</ul>

<hr>

<p>
包过滤器(简称 PF)被 OpenBSD 系统用于过滤 TCP/IP 通信和网络地址转换。PF
还能标准化和条件化 TCP/IP 通信，从而控制带宽和调整包的优先级。
从 OpenBSD 3.0 开始，PF 已经纳入 GENERIC 内核。
不再支持 OpenBSD 旧版本提供的防火墙/NAT 功能。

<p>
PF 由 Daniel Hartmeier 开发，现在由 Daniel 和其它 OpenBSD 团队成员维护和开发。

<p>
这些文档也提供
<a href="ftp://ftp.openbsd.org/pub/OpenBSD/doc/pf-faq.pdf">PDF</a>
格式，概括性的介绍了 OpenBSD 的 PF 系统。虽然它可能覆盖了 PF 的所有主要特性，
但也只是<a href="http://www.openbsd.org/cgi-bin/man.cgi">手册页</a>的补充文档，
不能代替手册页。

<p>
要完整且深入的了解 PF，请开始阅读
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4&amp;manpath=OpenBSD+4.3"
>pf(4)</a> 手册页。

<p>
作为 FAQ 的一部分，这些文档针对
<a href="../../../zh/43.html">OpenBSD 4.3</a> 的用户。
由于 PF 在不停的开发，象 4.3 与早期版本一样，在 4.3 与 OpenBSD-current 之间也有修改和增强。
所以建议读者仔细阅读其 OpenBSD 系统中的手册页。

<p>
<a href="../../zh/index.html">[回到 to FAQ]</a>
<a href="config.html">[下页: 起步]</a>

<hr>
<a href="../../zh/index.html"><img height="24" width="24"
    src="../../../back.gif" border="0" alt="[back]"></a>
<a href="mailto:www@openbsd.org">www@openbsd.org</a>
<br>
<small>$OpenBSD: index.html,v 1.37 2008/07/29 19:19:56 steven Exp $</small>

</body>
</html>
<!--
Originally [OpenBSD: index.html,v 1.37]<br>
$Translation: index.html,v 1.5 2008/08/05 04:10:02 dongsheng Exp $<br>
-->
